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ABSTRACT 


This  paper  discusses  some  aspects  of  operational  usefulness  of  oper- 
ational control  systems.   Three  prototypic  control  systems  are  defined. 
These  are  called  "local  real-time,"  being  essentially  a  decentralized,  non- 
computerized structure,  "global  periodic,"  being  based  on  periodic,  centralized 
computer  generated  schedules,  and  "on-line,  real-time,"  being  based  on  con- 
tinuous decision  making  performed  by  a  central  computer  connected  by  a 
communications  network  with  remote  operation.   The  capabilities  of  on-line, 
real-time  computers  for  facilitating  man-machine  problem  solving  are  noted. 
These  structures  are  compared  along  the  dimensions  of  "model  operationality ," 
"system  viability,"  environmental  compatability ,  and  finally,  development 
and  implementation  cost. 

Conclusions  are  drawn  to  the  effect  that  on-line,  real-time  structures 
are  generally  attractive  by  operational  standards,  the  one  unfavorable 
dimension  being  system  cost.   Even  the  latter  is  moving  in  a  favorable 
direction.   Current  research  at  Project  MAC  on  comparisons  of  structures  is 
discussed  briefly  and  a  summary  is  provided. 


I.  Introduction 

Preamble 

Some  months  ago,  I  was  discussing  my  research  in  heuristic  methods  of 
job  shop  sequencing  with  a  group  of  students.  They  listened  attentively  as 
I  extolled  the  virtues  of  a  new  sequencing  rule  I  had  just  tested.  When  I 
concluded,  one  of  them  inquired,  "Why  are  you  working  on  heuristic  methods 
when  job  shop  scheduling  has  been  successfully  formulated  as  an  integer 
linear  programming  problem?  I  mean,  you  can  get  the  optimal  schedule  with 
LP,  why  bother  with  a  heuristic  program  that  isn't  optimal  at  all?" 

I  pondered  his  question  for  a  moment  and  came  back  with,  "Optimality 
isn't  good  enough."   Taken  out  of  context,  the  logic  of  my  statement  doesn't 
stand  up,  but  what  I  meant,  and  what  I  went  on  to  say,  was  that  there  are 
several  other  dimensions  other  than  the  "optimality"  of  the  decision  model 
that  have  to  be  weighed  in  assessing  operational  usefulness.   I  have  spent 
some  time  since  that  conversation  in  exploring  the  ramifications  of  that 
question.   It  is  the  purpose  of  this  paper  to  discuss  some  of  the  issues 
that  have  been  uncovered  in  that  exploration. 


He  was  referring  to  one  of  several  formulations,  e.g.  [3],  [17],  [26]. 

As  a  professor,  I  was  certain  that  he  was  oversimplifying  the  problem,  but  as 

a  researcher  with  two  years  invested  in  a  project,  I  was  afraid  he  was  right. 
The  reader  is  forewarned  of  a  vested  interest,  therefore. 


Control  of  Operations 

The  area  of  application  of  the  decision  models  in  question  is  what 
Anthony  calls  operational  control.   He  defines  it  as  "the  process  of 
assuring  that  specific  tasks  are  carried  out  effectively  and  efficiently." 
[1,  p.  18].   It  includes,  as  I  shall  construe  it,  the  full  hierarchy  of 
operating  decisions  from  the  aggregate  production,  inventories,  and  work 
force  level,  to  the  detailed  day-to-day  decisions  governing  the  execution 
of  basic  production  tasks. 

In  order  to  maintain  tangibility  in  the  discussiozi,  I  will  concentrate 

2 
my  examples  in  manufacturing  control.   Hence,  the  decisions  to  be  considered 

are  those  of  sequencing  and  routing  of  jobs,  production  lot  sizes,  and 
worker  assignment  at  the  detailed  level;  and  overtime,  work  force  changes, 
subcontracting  work  or  "make  or  buy,"  due  date  negotiation  or  inventory 
policy  at  the  higher  decision  levels.   But  it  should  be  borne  in  mind  that 
what  is  true  for  operational  control  in  manufacturing  is,  with  minor  modi- 
fication and  at  an  appropriate  level  of  abstraction,  true  for  diverse  other 
problem  areas  such  as  hospital  administration,  launching  lunar  rockets,  and 
for  that  matter,  managing  multiple  programs  in  a  multiple  processor 
computer  system. 

What  is  meant  by  control  is  simply  obtaining  system  behavior  in  accor- 
dance with  some  basic  objectives  or  standards  or  some  predetermined  plan. 


2 

In  fact,  most  examples  will  be  drawn  from  job  shop  manufacturing  control 

since  my  research  and  experience  has  been  concentrated  in  that  problem  area. 
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Figure  1:   Basic  Control  Loop 


In  figure  1  is  shown  Che  basic  building  block  of  a  control  system.   The 
decision  making  mechanism  (c)  receives  two  basic  types  of  information,  namely, 
status  measurements  of  the  entities  or  activities  being  controlled  (a),  and 
goal  (or  budget,  or  schedule,  etc.)  information  from  higher  management  levels. 
It  "integrates"  these  inputs  based  on  some  procedure  or  decision  rule  and 
issues  a  direction  or  order  (d)  which  prescribes  (or  effects)  the  desired 
behavior  of  the  entities.   This  "feedback  loop"  schematic  emphasizes  an  im- 
portant aspect  of  control,  namely  that  control  is  both  a  decision  and  an 
information  process.   In  discussing  the  efficacy  of  a  control  process  one 
cannot  afford  to  ignore  either  component. 


A  second  concept  which  is  germane  to  our  discussion  is  that  control 
is  exercised  in  real-time ,  that  is,  when  the  activities  actually  take  place. 
That  this  is  self-evident  is  perhaps  true,  but  many  system  designers  be- 
have as  if  control  follows  somehow  automatically  from  the  generation  and 
promulgation  of  a  good  plan  or  schedule.   It  is  to  discard  that  manifestly 
dangerous  assumption  that  I  state  the  explicit  fact.   It  does  follow  that 
evaluation  of  usefulness  will  be  made  at  the  activity  or  real-time  level 
and  not  at  the  planning  model  level. 

Operational  control  systems  are  hierarchical,  this  suggests.   Tliere  may 
be  a  local  level  which  actually  effects  real-time  control,  a  "global"  level 
at  which  plans  or  schedules  for  the  detailed  activities  may  be  generated, 
and  finally  a  whole  host  of  decisions  not  directly  concerned  with  detailed 
execution  of  production  operations,  but  rather  dedicated  to  determining  the 
structure  of  the  environment  in  which  control  takes  place  or  to  governing  the 
behavior  of  the  control  system  itself.   It  will  be  convenient  to  lump  these 
indirect  control  decisions  into  a  single  category,  denoted  the  "structuring 
level"  in  the  figure.   Into  this  category  fall  such  decisions  as  manpower 
level  adjustments,  including  overtime,  "master  scheduling,"  including  due  date 
and  job  release  establishment,  make  here  or  subcontract  (i.e.,  "make  or  buy"), 
to  book  or  not  to  book  a  new  order,  and  the  like.   Also  policy-type 
decisions,  such  as  "reduce  the  weight  of  inventory  holding  cost  relative  to 
job  tardiness  costs,"  which  affect  control  system  operation,  are  included 
as  well.   A  hierarchical  control  system  is  depicted  schematically  in  figure  2. 
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Figure  2:   Hierarchical  Control  Structure 

In  summary,  control  processes  must  be  evaluated  considering  both  the 
information  and  decision  aspects  as  these  affect  operations  in  real-time, 
and  in  trio  context  of  the  hierarchical  structure  of  the  system. 


Operationality  of  Control  Systems 

Having  perpetrated  a  pun  in  tie  title  of  this  paper,  I  will  proceed  to 
the  second  meaning  of  "operational"  control;   this  being  control  that  is 
effective  in  practice--in  short,  control  that  really  works.   How  one  goes 
about  evaluating  the  effectiveness  of  control  systems  is  a  difficult  question 


to  answer.   But  some  aspects  are  clear.   One  is  that  the  final  evaluation 
cannot  be  conducted  at  the  level  of  a  mathematical  model--the  proof  of  the 
pudding  is  in  the  eating.   One  has  to  consider  the  full  system  in  relation 
to  its  physical  (and  economic)  environment  and,  departing  reluctantly  from 
the  realm  of  Cold-Blooded  Economics,  in  its  sociological  environment  as  well. 
And  one  must  assess  the  costs  of  development  and  maintenance  of  the  system 
as  well  as  its  relative  excellence  or  performance,  it  goes  almost  without 
saying. 

Organization  of  the  Material  to  Follow 

In  the  next  section  I  will  attempt  to  designate  those  system  components 
which  most  significantly  affect  system  performance,  and  to  construct  from 
these  some  prototypic  operational  control  system  structures.   In  the  third 
section,  some  (not  all)  dimensions  of  operational  usefulness  are  introduced 
and  applied  in  assessment  of  the  system  structures  and  the  decision  models 
which  engender  them.   Some  general  conclusions  on  operationality  as  a  function 
of  structure  are  drawn,  some  relevant  research  is  cited,  and  a  summary  is 
provided  in  section  IV. 
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II.   Operational  Control  System  Structures 

Introduc  tion 

Control  systems  can  be  differentiated  on  the  basis  of  several  attri- 
butes.  They  can  differ  by  virtue  of  the  nature  and  timing  of  information 
flows,  for  example,  or  the  structure  and  spatial-temporal  qualities  of  the 
"data  base"  (i.e.,  system  status  file)  provided  for  the  decision  making  com- 
ponents;  and,  for  that  matter,  the  form  and  content  of  the  decisions  themselves 
can  be  different.   Systems  can  also  be  distinguished  by  virtue  of  the  "inter- 
face" they  present  to  the  extra-system  environment,  including  higher  level 
management. 

All  of  these  attributes  affect  the  operational  usefulness  of  control 
systems,  it  is  contended.   But,  in  order  to  attack  the  usefulness  question 
it  will  be  necessary  to  define  these  attributes  more  precisely.   As  a  medium 
for  so  doing,  a  catalogue  of  different  system  components  is  first  offered 
and  then  combined  into  three  basic  prototypic  system  structures.   It  should 
be  noted  that  these  structures  are  selected  from  a  continuum  of  possibilities: 
any  number  of  intermediate  structures  can  be  as  easily  defined.   But  the 
three  I  have  chosen  represent  relatively  pure  forms  by  virtue  of  their 
structural  attributes. 

Control  System  Component  Attributes 

The  information  flows  and  levels  (i.e.,  accumulation  of  information 
flows--the  data  base)  which  interconnect  the  environment  and  decision  nodes 
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can  be  classified  by  three  important  attributes:   formality,  timing,  and 
scope.   Acquisition  of  information  can  be  performed  as  informally  as  by 
"taking  a  walk  through  the  shop"  or  as  formally  as  by  automatic  instrument 
recording  and  transmission  of  quantity  of  output,  precise  time  of  event 
occurrence,  or  other  status  changes.   The  more  form.al  the  information  system, 
the  more  predictable  is  the  System  behavior.   Until  relatively  recently, 
nearly  all  information  acquisition  at  the  real-time  level  was  performed 
informally.   For  example  a  foreman  determining  sequence,  or  a  production 
controller  deciding  whether  or  not  to  split  a  lot  acquired  their  input  data 
by  "eyeballing"  the  situation  at  the  work  station.   Also,  the  accuracy  of 
information  is  probably  proportional  to  the  formality  of  its  acquisition  or 
dissemination. 

Within  information  systems,  two  forms  of  timing  can  be  identified.   At 
one  extreme  is  periodic  information  flow.   If  runners  are  sent  out  once 
a  week,  say,  to  determine  current  job  status,  or  if  job  completion  notices 
are  collated  and  tabulated  periodically  for  rescheduling  purposes,  the 
information  flow  is  periodic.   If  decision  output--for  example,  a  shop 
schedule--is  issued  at  fixed  intervals,  say  once  every  two  weeks,  that  infor- 
mation flow  is  periodic.   At  the  other  extreme  is  continuous  information  flow, 
In  its  simplest  form  it  consists  of  constant  surveillance  of  operations.   The 
dispatcher  who  observes  tasks  being  completed  and  new  work  arriving  at  his 
work  station  is  receiving  continuous  inputs  of  decision-related  information. 
Use  of  automatic  data-collection  devices  to  update  status  of  jobs  or  work 
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stations  implies  continuous  information  flow  as  well,  and  in  such  formal 
systems,  the  term  "on-line"  is  of'cen  used  to  suggest  the  capability.   Timing 
of  acquisition  or  dissemination  of  course  affects  the  currency  or  "age"  of 
the  information  in  the  system. 

A  third  attribute  of  relevance  in  the  information  system  is  the  scope  or 
"globalness"  of  the  data  base  maintained  for  the  decision  maker.   If  the 
decision  making  mechanism  has  access  to  information  only  about  the  situation 
in  its  immediate  location,  the  data  base  is  local.   If  the  decision  maker  is 
provided  with  information  on  the  status  of  all  system  entities,  regardless  of 
how  physically  remote  they  may  be,  his  data  base  is  global.   The  dispatcher 
who  must  determine  which  job  to  work  on  next,  or  to  which  station  to  send  a 
completed  job,  based  only  on  facts  about  the  jobs  in  his  area  and  on  status 
of  work  stations  within  his  area  and  on  status  of  workers  within  sight 
or  sound,  is  serviced  by  local  information.   But  the  scheduler  who  can  ascer- 
tain status  of  all  jobs  and  all  machines,  can  draw  on  a  global  data  base. 
This  aspect  of  "globalness"  operates  directly  on  the  relative  consistency  of 
decisions  with  overall  system  goals  or  objectives.   The  "provincial,"  i.e., 
only  locally  cognizant,  decision  maker  may  be  unable  to  make  decisions  in  keep- 
ing with  overall  goals  simply  because  he  doesn't  know  enough  about  the  over- 
all situation  to  do  so. 

There  are  also  several  attributes  of  decision  nodes  of  relevance  here. 
One  is  the  decision  agency.  A  decision  may  be  rendered  by  a  man  alone,  or 
in  an  automatic  structure,  by  a  machine  alone,  but  in  many  cases  there  is  a 
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cooperative  effort,  and  hence  a  man-machine  agency.   In  scheduling  the  shop 
for  example,  the  schedule  may  be  formulated  entirely  by  a  man  using  a  Gantt 
chart,  entirely  by  a  machine  using  linear  programming  or  some  network  flow 
algorithm  (e.g.,  PERT,  critical  path  method),  or  in  a  mixed  effort,  involving 
successive  human  adjustment  of  parameters  for  computer  simulation  to  obtain 
a  final  schedule,  e.g.  [9],  [25].   Whenever  a  human  element  is  present,  one 
can  expect  elements  of  inconsistency  and  bias  [2]  to  creep  into  the  process. 
On  the  other  hand,  there  are  certain  decision  making  activities  involving 
subjectivity,  judgment,  intuition,  pattern  recognition  and  inductive  infer- 
ence that,  given  the  current  capabilities  of  artificial  intelligence  probably 
require  human  inputs  [7].   I  shall  want  to  retiirn  to  the  question  of  the 
operating  characteristics  of  man-machine  decision  processes  after  defining 
the  prototypes. 

One  other  attribute  of  a  decision  node  of  particular  interest  is  the 
time  scope  of  its  output.   The  two  main  types  of  decision  operations  classi- 
fied on  this  basis  I  shall  call  a  future  events  scheduler  and  a  sequential 

3 
event  dispatcher.     In  the  case  of  future  event  scheduling,  the  decision 

making  mechanism  establishes  desired  execution  dates  for  a  set  of  events, 
e.g.,  production  starts,  for  some  time  period  into  the  future,  this  time 
being  considered  for  this  purpose  sometimes  being  called  the  "planning  horizon" 
[19].   The  particular  program  for  calculating  the  schedule  may  vary  in  sophis- 
tication from  a  Gantt  chart  to  integer  linear  programming  or  dynamic  programming. 


3 
Rowe  [22]  uses  the  terms  "scheduling  decision  rule"  and  "job  assignment 

decision  rule"  in  much  the  same  way. 
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But  all  have  in  common  as  inputs,  a  set  of  tasks  or  activities  having  known 
or  predicted  elapsed  time  requirements  and  subject  to  some  precedence  relation- 
ships among  the  tasks. 

A  sequential  dispatching  decision  node  responds  to  the  requirement  for  a 
decision  in  real-time,  that  is  when  the  occasion  for  decision  actually  arises, 
and  not  before  that  time.   The  human  version  of  the  sequential  dispatcher  is 
the  foreman  who  determines,  on  the  spot,  whether  to  reroute  a  job  elsewhere, 
or  which  job  to  work  on  next,  or  what  lot  size  to  put  in  process,  or  the  like. 
But  one  can  also  conceive  of  an  elaborate  heuristic  program,  executed  on  a 
large  central  computer  (which  is  connected  to :an  input-output  console  on 
the  shop  floor),  being  used  for  the  same  purpose. 

In  any  operations  control  system  it  is  necessary  to  have  sequential 
dispatching.   It  is  not  necessary,  although  it  may  be  desirable,  to  have 
a  future  event  schedule,  which  is  to  say,  it  is  also  sufficient  for  control 
to  have  sequential  dispatching  rules.   The  dispatching  rule  may  be  as  simple 
as  "follow  the  schedule"  if  a  schedule  exists,  or  it  may  be  as  complex  as  a 
chess  player's  thought  process. 

I  also  have  noted  the  existence  of  "structuring"  decision,  those  decisions 
v;hich  determine  manning  levels  or  load  level  or  which  select  parameters  for 
lower  level  decision  rules.   These  decisions  can  be  future  event  oriented 
schedules,  or  they  can  be  real-time  adjustments  to  current  conditions,  that  is, 
sequential  decisions.   But  these  are  discretionary  decisions,  work  can  go  on 
whether  they  are  made  or  not.   One  can  argue  that  for  any  reasonable  control, 
structuring  decisions  are  necessary,  but  even  if  this  is  true,  the  timing  of 
the  decisions  is  discretionary. 
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Figure  3:   Legend  for  Schematics 


In  figure  3  the  symbols  for  the  various  information  flows  and  decision 
nodes  are  presented.   I  have  taken  certain  liberties  with  the  symbology 
commonly  employed  by  control  engineers  in  order  to  emphasize  those  features 
considered  to  be  most  relevant  to  the  particular  types  of  control 
systems  under  discussion  here.    Identification  of  "sequential  dispatching," 
"future  event  scheduling,"  and   "structuring"  decisions  is  accomplished  by 
positional  relationship  in  the  schematics.   When  all  three  exist,  the  sequen- 
tial decisions  are  at  the  lowest  level  of  the  hierarchy,  drawing  inputs  from 
a  higher  scheduling  level,  which,  in  turn,  is  adjusted  by  a  still  higher 
level  structuring  process. 
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Somc  Prototypic  Control  System  Structures 

One  of  the  more  primitive  ways  of  combining  these  components  for  pur- 
poses of  effecting  control,  I  shall  call  local  real-time.  It  is  characterizf;d 
by  informal  information  flows  and  decentralized,  machine-unaided ,  decision 
making.   The  schematic  is  shown  in  figure  4.   The  required  real-time  decisions 
are  made  almost  purely  on  the  basis  of  a  local  data  base,  and  communication 
with  higher  control  levels  is  informal  and  intermittent.  Typically,  the  most 
that  is  supplied  from  above  to  the  real-time  decision  maker  are  some  rough 
goals  such  as  order  due  dates.   Higher  level  decision-making,  "structuring,"  is 
ad  hoc .   Local  autonomy  dominates  the  picture  until  a  crisis  occurs,  at  which 
time  a  certain  amount  of  real-time  structuring  may  take  place  in  the  form  of 
decisions  to  work  overtime,  to  subcontract  or  to  renegotiate  delivery  speci- 
fications with  the  customer.  A  formal  schedule  may  not  exist  as  such. 

The  local  real-time  structure  is  fairly  typical  of  manufacturing  control 
systems  in  the  days  before  computers  were  generally  available.  Nowadays,  it 
frequently  represents  the  point  of  departure  for  the  system  designer  and  it 
will  be  treated  as  such  for  discussion. 

A  second  prototype  is  the  global  periodic  structure.   As  shown  in 
figure  5,  it  is  characterized  by  formal  information  flows  and  some  machine- 
made  decisions  and  hence  is  a  product  of  more  recent  vintage  for  the  most 
part.   In  a  global  periodic  system,  the  bulk  of  the  decision  labor  is  per- 
formed at  the  global  level,  that  is  to  say,  the  effort  is  expended  in 
obtaining  a  good  future  event  schedule.   The  operation  might  proceed  as 
follows. 
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Figure  4:   Typical  Local  Real-Time  Control  Structure 


Periodically,  the  status  of  all  relevant  system  entities  (jobs,  work 
stations,  labor  force)  is  measured,  and  a  program  of  some  sort  (simulation, 
linear  programming,  critical  path  algorithm)  is  used  to  generate  a  set  of 
times  for  future  events.   This  is  sorted  by  executing  agency  and  promulgated 
in  the  form  of  explicit  instructions  to  the  agency  ("dispatch  diary,"  for 
example).   To  the  degree  possible,  it  is  the  duty  of  the  local  decision  maker 
to  follow  the   schedule.   To  the  extent  that  he  can't  follow  it,  it  is  his 
problem  to  reconcile  the  schedule  and  that  which  is  feasible.  The  reconcil- 
iation process  is  based  on  his  current,  local  data  base. 
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Figure  5;   Typical  Global  Periodic  Control  Structure 


Two  aspects  of  global  periodic  systems  which  are  important  in  assessing 
operating  characteristics  are  the  interval  between  schedules  and  the  compre- 
hensiveness of  the  schedule.   The  interval  may  be  fixed  or  variable.  As  new 
facts  come  to  light  or  unpredicted  events  occur,  a  new  schedule  may  be  com- 
puted and  issued.   It  is  more  common  (in  my  experience)  to  find  a  fixed 
time  between  schedules  which  possibly  reflects  (1)  the  difficulty  of  deter- 
mining when  enough  new  and  different  circumstances  have  arisen  to  warrant 
rescheduling  and  (2)  a  desire  for  regularity  in  computer  employment. 
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A  schedule  is  comprehensive  when  the  scheduling  model  includes  the 
bulk  of  the  economically  relevant  variables  present  in  the  process.  For 
example,  a  manufacturing  schedule  for  each  operation  can  be  obtained  by 
backdating  operation  start  dates  from  the  order  due  date  using  "standard 
lead  times"  for  processing  and  waiting.   Such  a  schedule  is  not  comprehen- 
sive because  it  does  not  explicitly  consider  the  limited  capacities  at 
work  stations,  or  opportunities  for  alternate  routings  of  jobs,  or  possible 
combinations  of  setups  and  the  like.   Such  an  "infinite  capacity"  schedule 
requires,  even  when  first  issued,  considerable  reconciliation  at  the  local 
level.   In  fact,  the  schedule  acts  more  as  a  convenient  repository  of  the 
status  of  One  variable,  estimated  job  lateness,  than  as  a  prescription  to 
be  followed.   For  this  reason,  a  system  based  on  non-comprehensive  sched- 
uling may  be,  in  fact,  more  of  a  local  real-time  structure  than  a  global 
periodic  one.   Consequently,  only  if  the  schedule  reflects  the  major 
elements  of  physical  feasibility,  so  that  it  can  be  implemented  as  issued 
(at  least  at  the  outset),  will  it  qualify  as  global  periodic  in  the 
scheme  of  our  defining. 

Decision  making  at  the  structural  level  can  be  quite  formal  and  well- 
defined  in  a  global  periodic  structure.   Suppose  the  schedule  is  generated  by 
use  of  a  simulation  incorporating  heuristics  for  lot  size  determination, 
sequencing,  and  routing  and  current  shop  configuration  as  to  machine  and 
manpower  availability  (as  in  [25]).   Then,  repeated  simulations  can  be 
made  to  evaluate  adjustment  of  capacities  through  use  of  overtime  or  worker 
re-assignment  or  hiring.   Or  suppose  linear  programming  is  used  to  generate  the 
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schedule.   Structure  adjustments  can  easily  be  made  by  changing  constraints. 
In  both  cases  after  a  "satisfactory"  result  has  been  obtained,  both  the  near 
term  structure  and  the  detailed  work  schedule  are  outputs.  The  man-machine 
structuring  process  consists  of  repeated  evaluation  of  structural  alternatives. 
To  be  sure,  there  exists  a  question  of  machine  availability  and  cost  for  such 
recursive  propose-run-evaluate-ad just-run  again  processes,  but  the  feasibility 
is  evident. 

The  third  prototype  is,  using  consistent  nomenclature,  global  real-time. 
However,  I  will  bow  to  the  current  vernacular  and  denote  it  as  on-line,  real- 
time. The  salient  characteristics  of  this  structure  are  formal  and  continuous 
flows  of  global  information  throughout  the  system,  and  machine  involvement  in 
all  decision  making.   Two  possible  structures  are  represented  schematically 
in  figure  6.   In  figure  6  (a)  a  man-machine  real-time  level  is  shown.   This 
suggests  what  amounts  to  a  cooperative  reconciliation  of  the  indications  of 
the  global  level  and  that  which  is  known  exclusively  at  the  local  site  of 
operations.   The  central  computer  program,  based  on  current,  global  status 
information,  makes  a  dispatching  decision,  for  example,   selects  a  job  to 
assign  to  an  idle  work  station.   But  the  local  decision  maker  observes  an 
opportunity  to  save  a  setup  by  selecting  a  different  job.  He  keys  this  fact 
into  a  console  installed  in  his  area,  and  the  computer  responds  with  a  yes 
or  no  based  on  an  evaluation  of  this  new  information.   In  general,  the  real- 
time decisions  are  made  centrally,  this  implies,  but  subject  to  local 
requests  for  reconsideration  resulting  from  facts  not  available  to  the 
central  decision  maker.  The  cooperative  effort  guarantees  that  reconcili- 
ation takes  place  based  on  global  status  information  and  that  ignorance  of 
the  situation  at  distant  but  interrelated  activity  points  will  not  prevail. 
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(a)  Semi-Automatic 


(b)  Automatic,  "Closed-Loop" 


Figure  6:   On-Line,  Real-Time  Control  Structure 


At  some  point,  enough  of  the  relevant  information  on  the  system  entities 
can  be  centrally  maintained  to  "close  the  loop,"  that  is,  to  automate  the 
real-time  decisions  completely.   Such  a  structure  is  represented  in  figure  6(b) 
Each  status  change  results  in  a  transaction  which  is  forwarded  immediately  to 
the  central  processor  for  status  file  updating.   If  the  status  change  requires 
a  real-time  decision,  the  appropriate  program  is  applied  to  the  situation 
data  and  the  choice  is  made.   This  implies  first  that  there  are  ("on-line") 
input-output  terminals  located  throughout  the  area  of  controlled  activity  and 
second,  that  the  computer  possesses  the  capability  of  responding  very  quickly 
(in  "real-time")  to  status  change  reports.   If  control  is  exercised  in 
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real-time,  no  significant  delays  in  activity  should  occur  from  awaiting  a 
decision  by  the  computer. 

In  an  automatic  or  semi-automatic  control  system  of  this  type,  there  is 
no  requirement  for  a  formal  schedule.   To  be  sure,  the  real-time  decision 
programs  may  be  based  on  a  schedule  as  one  input,  but  even  this  is  not 
required.   Also,  there  will  almost  surely  be  a  "planning  ahead"  logic  in  the 
real-time  decision  programs.   That  is,  in  order  to  make  a  decision  now ,  it 
will  consider  a  whole  series  of  future  ramifications  of  the  choices  open  to 
it.   But  each  "now,"  represents  a  new  problem  so  that  the  starting  point  for 
each  decision  assessment  is  true,  current  status--not  what  was  hoped  to  be 
true  some  time  in  the  past  as  is  true  in  global  periodic  structures. 

There  are  several  intermediate  structures  which  fall  between  the  global 
periodic  prptotype  and  the  on-line,  real-time  structure  defined  above.   In 
some  instances,  for  example,  status  feedback  may  be  obtained  continuously 
while  control  direction  is  performed  periodically.   That  is,  there  is  real- 
time status  pickup  used  to  monitor  a  periodic  future  event  schedule.   One 
such  approach  is  described  in  Burck  [5].   Such  on-line,  real-time  monitoring 
provides  for  variable  interval  rescheduling,  but  it  does  not  alter  the  basic 
periodic  nature  of  the  structure. 

In  figure  6,  I  have  represented  activity  at  the  structuring  level  as 
being  combined  with  the  real-time  control  level.  What  is  suggested  is  the 
possibility  of  closely-coupled  m.-.n-machine  problem  solving  at  this  level. 
First  of  all,  the  human  decision  maker  has  ready  access  to  current  system 
status.   Secondly,  to  the  degree  that   the   system  is  automatic,  he  has  ready 
access  to  control  programs  which  will,  without  error,  simulate  their  own 
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response  to  a  given  set  of  inputs.   And,  given  (1)  a  valid  starting  point 
(2)  a  valid  simulation  program,  he  can  proceed  to  evaluate  alternative 
structures,  essentially  at  will,  without  diminishing  the  effectiveness  of  the 
on-going  real-time  control  process.   This  latter  facility  is  akin  to  the  capa- 
bility of  the  so-called  "time -sharing"  systems,  and  is  elaborated  on  below. 
Moreover,  the  man  can  monitor  his  simulations  while  they  are  in  process  in 
order  to  terminate  the  evaluation  of  unpromising  alternatives  or  to  pursue 
further  those  of  more  interest,  or  even  to  "intertwine"  himself  with  the 
simulation,  adjusting  parameters  as  he  goes. 

A  Digression  on  the  Nature  of  On-Line,  Real-Time  Computer  Systems 

The  basic  capabilities  required  in  an  on-line  real-time  control  system 
are  a  communications  network  permitting  on-line  connection  of  remote  system 
operations,  and  relatively  fast  response  to  decision  requirements  as  they  arise, 
In  order  to  provide  this  latter  capability  the  central  computer  must  manage 
memory  images  of  several  programs  (for  different  responses) ,  and  interrupt 
lower  priority  programs  when  higher  priority  transactions  arise.  All 
existing  real-time  computer  systems  provide  hardware  for  interruption  and 
either  hardware  or  software  for  memory  management. 

Another  application  of  the  on-line  real-time  processing  capability  has 
been  in  "time- sharing"  the  central  processor  and  its  files  to  provide  multiple 
users  with  simultaneous  access  [6,  p.  7].   The  idea  is  that  the  services  of 
the  computer  are  rapidly  commutated  among  the  several  users,  who  are  stationed 
at  remote  teletypewriter-like  consoles,  providing  each  active  user  with  a 
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short  burst  ("quantum")  of  exclusive  service.   With  limited  high-speed 

memory,  this  involves  "swapping"  some  portions  of  the  user  programs  in  and  out. 

The  purpose  of  these  systems  is  to  alleviate  the  necessity  of  delay  between 
problem  solver's  proposal  and  computer's  disposal  or  the  expensive  alternative 
of  the  computer's  awaiting  human  reactions  to  its  responses.   Since  the 
probability  is  high  that  some  subset  of  the  users  will  require  computational 
service  during  a  given  round  of  the  "commutator,"  the  fact  that  the  complemen- 
tary subset  of  users  may  be  lost  in  thought  does  not  result  in  idle  capacity. 

The  end  product  of  time-sharing  is  the  provision  of  an  interactive  or 
"conversational"  relationship  between  the  human  (or  humans)  and  the  computer. 
In  effect,  this  enables  close  cooperation  between  man  and  machine  in  problem 
solving  without  incurring  exorbitant  cost.  ' 

Since  on-line,  real-time  processing  and  time-sharing  are  based  on  the 
same  technology  they  are  compatible  with  each  other.   That  is  to  say,  a 
human  problem  solver  interacting  with  a  computer  can  be  treated  as  another 
transaction  origination  station,  being  allowed  to  interrupt  programs  of 
lower  priority  and,  in  turn,  being  interrupted  by  real-time  transactions 
as  they  arise. 

Hence,  along  with  provision  of  a  current,  global  data  base  and  substantial 


For  more  comprehensive  discussion  see  [12].   The  original  concept  is 
credited  to  Corbato  and  McCarthy  [18]  and  Corbato  has  led  the  design  and 
development. 

At  Project  MAC,  M.I.T.  there  is  current  provision  for  thirty  active 
users.  There  are  over  two  hundred  terminals  at  M  I.T.  and  several  others 
located  across  the  country.   For  a  discussion  see  Fano  [10]. 
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Figure  7:  On-Line,  Real-Time  System  Configuration 


computational  power  for  real-time  decision  making,  we  can  postulate  the 
existence  of  a  system  which  allows  freely  interactive  problem  solving  at  no 
cost  in  idle  time.   And  there  is  a  distinct  difference  in  the  degree  of 
cooperation  possible  in  such  a  system  as  compared  with  the  more  familiar 
"batch"  mode  of  operation  employed  in  most  global  periodic  systems. 

A  typical  on-line,  real-time  computer  configuration  is  shown  in 
figure  7.   Interaction  is  provided  at  the  "management  console,"  which 
may  be  provided  with  cathode  ray  tube  display  facilities  as  well  as 
ordinary  keyboard  devices. 
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6 
III.   Some  Dimensions  of  Operational  Utility 


Introduction 

I  have  suggested  that  these  structures  differ  in  usefulness.   The 
problem  is  to  define  the  dimensions  of  usefulness,  of  which  there  are 
several.  While  the  list  is  neither  exhaustive  nor  mutually  exclusive, 
it  includes  dimensions  attributable  to  the  decision  model  largely  inde- 
pendent of  the  supporting  information;   dimensions  which  apply  to  the 
system  as  a  whole  in  its  relationship  with  the  physical  (and  economic) 
environment  in  which  it  operates;   and  finally,  the  system  in  relation- 
ship with  its  sociological  environment. 

Several  of  these  aspects  are  practically  self-evident,  and  I  will 
treat  these  superficially.   Others  are  more  subtle  and  complex,  but  have 
been  studied  in  depth  by  others.   Among  these  are  questions  of  dynamic 
stability  both  as  to  the  decision  nodes  and  as  to  the  full  system,  which 
has  been  treated  by  Forrester  [11],  and  some  aspects  of  environmental 
compatibility  which  have  been  discussed  by  Pounds  [21]. 

Model  Opcrationality 

Some  measures  of  usefulness  can  be  applied  to  the  decision  model  or 
decision  rules  derived  therefrom,  even  assuming  perfect  information  inputs 
unbounded  managerial  rationality. 


I  use  the  term  "utility"  instead  of  "usefulness"  because  I  feel  it 
properly  connotes  a  weighting  applied  to  mutliple  dimensions. 

It  is  difficult  to  cite  disjoint  virtues.   The  man  who  laid  down  the 
Boy  Scout  Law  had  a  similar  problem,  and  he  settled  for  inclusion  of  such 
overlapping  attributes  as  "friendly,  courteous,  kind,  and  cheerful."  Even 
faith,  hope  and  charity  provide  some  grey  areas  for  biblical  scholars  to 
bicker  about. 
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One  dimension  of  interest  is  model  relevance  by  which  term  I  mean 
to  indicate  the  correspondence  between  the  problem  solvable  by  the  model 
and  the  problem  as  it  exists.   In  most  cases,  this  is  a  question  of  the 
criterion  or  objective  function  being  considered.   There  are  decision 
rules  which  are  known  to  minimize  (or  at  least  perform  very  well  as 
measured  by)  job  waiting  time.   Discovery  of  these  rules  was  a  notable 
academic  coup,  but  it  did  not  provide  solutions  to  most  manufacturing 
control  problems  since  waiting  times  are  only  loosely  related  to  the 
relevant  criteria  which  might  include  tardiness  costs  or  overtime  premiums 
paid  to  avoid  tardiness  and  holding  costs  for  work  in  process  inventory, 
among  others.   Another  popular  objective  has  been  minimization  of  the 
"make  span,"  the  time  to  complete  the  last  of  a  set  of  orders  in  the  back- 
log.  While  this  objective  may  be  correlated  with  realistic  goals,  its 
correspondence  is  indirect  and,  consequently,  the  relevance  of  the  model  is 
questionable.   Hitch  [13]  has  treated  in  his  now  classical  essay  the  ques- 
tion of  consistency  of  lower  level  objectives  with  higher  level  goals. 

Another  dimension  is  model  scope.   It  is  a  question  of  inclusion,  in 
one  model,  of  interdependent  system  entities.   It  is  obviously  related 
to  the  "globalness"  attribute  of  information  systems,  but  if  the  model 
does  not  consider  subunit  interdependencies,  the  scope  of  the  information 
system  is  unemployable.   Single  work  station  optimizing  rules  are  useful 
but  applied  with  danger  (and  loss  of  usefulness)  in  a  multiple  "ork 
station  shop.   Single-stage  inventory  models  are  numerous  and  well- 
solved,  but  may  be  disastrously  applied  to  multiple-stage  inventory 
systems.  A  dispatcher  (who  has  a  model  of  the  shop,  however  informal) 
rushing  a  high  priority  job  through  his  section  only  to  have  it  wait 
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behind  a  disabled  machine  elsewhere  in  the  shop,  is  employing  a  model  of 
limited  scope  and  utility.   Limited  model  scope,  even  when  the  objectives 
are  consistent  with  higher  level  goals,  can  result  in  a  type  of  "local 
suboptimality ."  Good  intentions  are  not  enough. 

There  is  also  the  well-known  and  well-discussed  problem  of  model 
validity.   Validity  is  a  question  of  the  of  the  correspondence  of  the  phenomena 
captured  in  the  model  with  the  phenomena  as  they  exist.   Such  questions  as: 
Are  the  cost  estimates  accurate?  Are  all  relevant  variables  included  in 
their  appropriate  functional  form?   Is  sevice  time  hyperexponential  or 
exponential?  are  all  validity  questions.   Unless  the  model  represents 

real  life,  the  resulting  decisions  will  not  reflect  the  excellence  pre- 

8 
dieted  by  the  model. 

One  element  of  real  life  often  neglected  by  control  system  designers 
is  the  fact  that  the  world  is  dynamic  while  their  models  are  static. 
Failure  to  provide  for,  or  at  least  test  the  effects  of,  dynamic  changes 
in  model  inputs  has  resulted  in  some  unsuccessful  control  system  designs. 
Magee  [15]  and  Forrester  [11]  cite  several  examples.   One  which  I  recall 
seeing  in  action  was  a  multiple  stage  work-in-process  inventory  control 
system  in  a  flow  shop.   Inventory  at  each  stage  was  controlled  by  in- 
dependently established  "reorder  points"  and  lot  sizes.   When  requirements 
fluctuated,  the  ripples  in  demand  were  carried  back  to  the  early  stages  in 


Q 

See  [4]  for  a  comprehensive  discussion  of  validity. 
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the  process,  amplified  as  faithfully  and  dramatically  as  in  a  superheterodyne 
radio  receiver.   Optimizing  a  static  model  may  be  good  mental  exercise,  but 
before  it  is  applied  in  a  dynamic  world,  its  properties  in  that  world  require 
assessment . 

Another  dimension  of  relevance  (but  note,  not  dominating  importance) 
is  the  "degree  of  optimality"  provided  by  the  decision  rule.   Does  the 
decision  rule  always  find  the  optimal  operating  decision  (in  the  context 
of  the  model)  or  does  it  merely  find  a  satisfactory  decision--better  ones, 
on  the  average,  than  other  decision  rules.   This  world  of  decision  rules 
thus  divides  itself  into  "algorithmic"  and  "heuristic"  procedures.   Other 
things  being  equal,  of  course,  an  optimizing  rule  is  desirable. 

The  last  aspect  of  model  usefulness  is  computability .   Since  one  can 
always  specify  exhaustive  search  of  alternatives  as  an  optimizing  procedure, 
this  is  a  rather  basic  dimension.   In  a  real-time  operation,  one  cannot 
wait  for  a  three  hour  computer  run  to  establish  a  routing  decision.   Some 
very  powerful  modeling  approaches  suffer  from  lack  of  computational 
feasibility.   Among  these  are  integer  linear  programming  and  dynamic 
programming  in  problems  of  substantial  size.   There  are  distinct  tradeoffs 
among  model  scope  and  validity,  which  affect  the  problem  size,  optimality, 
and  computability. 

These  model-related  dimensions  suggest  the  general  desirability  of 
large,  complex  models  and  automatic  computational  assistance.   And  while 
these  are  supportable  in  global  periodic  and  on-line,  real-time  systems, 
neither  can  be  in  a  local  real-time  structure.   It  is  for  this  reason  that 
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the  latter  system  is  of  interest  mostly  as  a  point  of  departure  for  choice 
between  the  two  more  formal  and  elaborate  structures.   When  a  decision 
model  leads  to  elaborate  computation,  its  use  may  require  a  global  periodic 
control  structure.   One  cannot  await  a  computer's  ten  minute  solution  of 
a  routing  choice  problem  for  real-time  control  purposes,  it  is  more   than 
likely. 

System  Viability 

In  considering  the  performance  of  a  control  system  as  a  whole,  the 
question  of  its  behavior  with  respect  to  its  physical  environment  arises. 
One  way  to  partition  this  large  question,  arbitrary  as  it  may  be,  is  into 
matters  related  to  dynamic  stability,  i.e.,  the  tendency  to  return  to 
initial  conditions  after  having  been  disturbed,  and  what  I  shall  denote 
as  dynamic  robustness,  the  maintenance  of  utility  over  time. 

As  previously  noted,  dynamic  instability  can  result  from  ampli- 
fication at  decision  nodes,  but  it  can  also  result  from  delays  in  infor- 
mation flow.   Forrester  [11]  provides  several  examples  of  such  phenomena. 
A  discussion  of  the  causes  of  instability  is  beyond  the  scope  of  this 
paper.   The  generalization  I  would  offer  is  that  dynamic  instability  is 
likelier  to  be  a  problem  where  delays  in  information  flows  exist.   This  is 
not  to  say  that  instability  is  an  inevitable  consequence  of  delay.  But, 
applied  to  the  prototypes,  one  would  assess  global  periodic  structures 
as  being  more  subject  to  instability  problems  than  on-line,  real- 
time structures,  other  characteristics  being  the  same. 
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The  notion  of  dynamic  robustness  is  rather  complex.   On  the  one  hand, 
robustness  depends  on  the  adaptability  of  the  system--its  ability  to  sustain 
its  vralidity.   This  implies  a  need  for  monitoring  the  physical  environment 
for  changes  in  economic  factors,  physical  constants,  distribution  of  random 
variables,  and  the  like,  and  updating  the  model  when  significant  changes 
occur.  Again,  in  this  aspect,  the  delayed  feedback  of  results  in  global 
periodic  structures  leaves  them  vulnerable  to  changes  of  this  sort. 

One  manifestation  of  this  is  the  schedule  "decay"  phenomenon.   The 
statement,  "I  follow  the  schedule  pretty  closely  for  the  first  day  or 
two,  but  then  all  hell  breaks  loose  and  I'm  pretty  much  on  my  own  to  figure 
things  out,"  is  symptomatic  of  decay.   The  problem  is  that  detailed  plans, 
regardless  of  how  well-laid,  are  subject  to  errors  of  estimate  of  processing 
times  or  worker  productivity  and,  in  addition,  have  nc  way  of  coping  with 
inherently  unpredictable  (except  as  to  average  incidence)  events  such  as 
machine  breakdowns,  worker  absenteeism,  unacceptable  quality  performance, 
and  the  like.   In  the  first  case,  if  a  job  takes  longer  than  expected  at 
one  work  station,  it  may  not  arrive  in  time  to  be  started  according  to 
schedule  at  another.    In  case  of  "stochastic"  events  such  as  breakdowns, 
the  whole  schedule  may  no  longer  be  valid. 

This  decay  process  increases  in  intensity  as  time  passes  after 
schedule  issuance  and  more  and  more  departures  from  schedule  have  to 
be  made  on  the  basis  of  local  considerations,  with  inherent  tendencies 
to  locally  suboptimal  decisions.   Decay  is  a  problem  only  with  global 
periodic  system  structures.   Since  on-line,  real-time  systems  respond 
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to  whatever  situation  actually  exists  at  the  moment  of  decision,  there 
is  no  deterioration  of  performance  as  time  passes. 

Environmental  Compatibility 

Relaxing  the  implicit  assumptions  of  rational  management  and  dutiful 
execution  introduces  consideration  of  the  interface  presented  by  the 
control  system  to  the  people  who  use  it  and  who  are  controlled  by  it. 
When  one  enters  the  sociological  realm,  one  is  led  to  draw  rather 
speculative  conclusions,  it  should  be  pointed  out. 

The  first  aspect  of  environmental  connection  to  be  considered  is 
that  of  upwards  compatibility.   One  important  element  of  this  deals  with 

the  correspondence  of  system  criteria  with  those  of  the  managers  who  use 

9 
it.    This  general  problem  has  been  treated  by  Pounds(21].   If  a  system 

is  to  be  used   (and  it  must  be  to  be  useful),  it  must  provide  behavior 

consistent  with  the  objectives  of  those  who  employ  it.   The  objectives  of 

system  managers  are  likely  to  be  drawn  from  their  own  reward  system.   For 

example,  I  once  had  a  discussion  with  a  production  manager  about  his 

feelings  on  the  appropriate  tradeoffs  between  work-in-process  carrying 

cost  and  tardiness  penalties.   His  view  of  the  tradeoff  was  impressive  in 

its  simplicity,  "Look,"  he  said, "for  excessive  Inventory  I  get  called  on 

the  carpet,  maybe;   but  for  late  orders  I  can  get  fired."  In  his  view,  then. 

Inventory  was  to  be  minimized  subject  to  a  no  tardiness  constraint,  and 

this  was  not  exactly  what  the  textbooks  had  suggested. 


q 
Which  are  not  necessarily  consistent  with  economic  theory. 
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The  system  designer  has  a  dilemma:   He  must  Install  rational  managers, 
or  create  rational  managers  out  of  ostensibly  irrational  ones,  or  he  must 
design  a  system  with  flexibility  in  its  criteria.   One  suspects  that 
the  last  of  these  is  the  most  practical. 

Another  question  of  upward  compatibility  is:   Can  management  manage 
the  system?  Are  there  knobs  to  twist,  so  to  speak,  which  vjill  alter 
system  performance  in  a  predictable  way?   For  example,  if  circumstances 
dictate,  can  the  manager  adjust  a  parameter  and  obtain  lower  inventories 
across  the  entire  line,  or  selectively  within  product  group? 

This  is  partially  a  question  of  general  system  design  doctrine,  but 
it  implies  a  need  for  the  type  of  structuring  capability  available  with 
on-line,  real-time  systems.   Particularly  when  on-line  simulation  is 
provided,  accurate  predictions  can  be  quickly  obtained  for  all  types  of 
adjustments  of  system  behavior.  And  the  provision  of  coupling  of  intuitive, 
subjective,  heuristically  adaptive  man  closely  with  the  computer  promises 
extrordinary  potential  in  complex  problem-solving  of  the  structuring 
type  [7,  20]. 

The  higher  level  management  decisions  in  operational  control  are,  by 
and  large,  "non-programmed,"  that  is,  they  are  characterized  by  complexity 
and  lack  of  procedural  structure.   Newell  and  Simon  have  advocated  the  use 
of  heuristic  programming  for  such  problems,  "the  way  is  open  to  deal 
scientifically  with  ill-structured  problems. . .to  make  the  computer  co- 
extensive with  the  human  mind."  [22,  p. 9].  My  point  is  that  this  is  like- 
lier to  accur  if  the  computer  can  be  made  coextensive' with  the  thinker 

10 
during  the  thinking  process. 


For  a  more  thorough  discussion  of  cooperative  problem  solving  see  [7] 
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Another  aspect  of  interest  might  be  called  downwards  compatibility. 
The  point  to  be  stressed  here  is  the  protection  of  the  operator  on  the 
shop  floor  from  the  confusion  and  general  dissonance  which  accompany 
alterations  in  plans  or  schedules.   This  is  possible  in  an  on-line, 
real-time  structure  because  the  operator  never  need  see  a  future  event 
schedule  or  engineering  lineup.   The  changes  that  are  made  are  made 
to  the  computer  memory;   the  operator  sees  only  the  end  result,  the 
direction  for  his  next  activity.   In  a  global  periodic  system  changes  must 
be  promulgated  frequently  and  confusion  and,  it  may  be  hypothesized,  some 
loss  of  general  confidence  may  result. 

An  aspect  of  general  compatibility  is  the  ability  of  the  organization 

12 

to  comprehend  the  operation  of  the  system.    Another  behavioral  hypothesis 

is  that  people,  being  real-time  data  processors  themselves,  comprehend 
even  very  complex  sequential  event  dispatching  more  easily  than 
mysteriously  developed  schedules.   A  less  controversial  virtue  of  the 
man-machine  coupling  feature  is  the  capability  of  "gaming"  with  the 
simulation  model  of  the  shop.   This  facility  for  training  is  strictly 
a  by-product  of  the  operating  system. 

While  the  comparative  virtues  of  the  on-line  structure  in  providing 
a  flexible  interface  with  its  human  environment  are  speculative  at  this 
point  in  history,  the  general  efficacy  of  close-coupling  through  time- 
sharing appears  to  be  an  accepted  fact. 


I  am  thinking  of  the  type  of  phenomenon  manifested  in  my  son's 
refusal  to  accept  banana  ice  cream  after  having  been  promised  pistachio 
with, "my  mouth  was  all  set  for  pistachio,"  for  example. 

12 

A  well-understood  system  may  provide  a  mixed  blessing.   If  an  un- 
wholesome attitude  toward  the  system  exists  the  comprehension  may  result  in 

nartlrulprlv  nn^  arfs  nf  sahnfacrp. 
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Development  and  Implementation  Cost 

The  final  dimension  of  operational  utility  is  tied  up  with  the 
question  of  system  development  and  maintenance  cost.   No  matter  how 
excellent  a  design  may  be,  there  is  a  cost  threshold  beyond  which  it  is 
no  longer  economically  interesting.   This  would  seem  to  apply  to  on-line, 
real-time  computer  systems  at  this  point  in  time.   They  are  expensive: 
terminals,  communication  lines  and  more  sophisticated  central  processors 
are  all  costly.   But  there  are  some  factors  that  argue  against  classifying 
these  computer  systems  as  high  cost  items  relative  to  conventional 
computers.   These  are: 

1.  The  fact  that  the  data  originator  is  on-line  when  his 
input  is  processed  provides  unique   opportunities  for  error 
detection,  clarification  or  correction. 

2.  Because  communication  is  direct,  the  expensive  and  error- 
prone  media  conversions,  e.g.,  hard  copy-to-cards ,  cards- 
to-tape,  tape-to-printer,  associated  with  batch  processing 
can  be  largely  eliminated. 

3.  The  technology  is  maturing.   All  of  the  major  computer 
manufacturers  offer  more  or  less  suitable  hardware  and 
software  for  real-time  processing.   Time-sharing  is  now 
relatively  well-understood  and  commercially  feasible. 

An  assumption,  based  on  historical  patterns,  is  that  maturing 
technology  and  increasing  demand --leading  to  volume  pro- 
duction--will  provide  lower  costs. 
It  is  my  opinion  that  the  on-line,  real-time  computer  configuration  will 
be  the  standard  product  of  the  industry  within  five  years. 
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IV.   Conclusions 

Introduction 

By  a  somewhat  tortuous  route,  I  have  led  you  through  a  consideration 
of  what  constitutes  operational  control  systems  (in  one  man's  view)  and 
what  characteristics  of  these  systems  lead  to  successful  operation.   In 
what  could  hardly  be  described  as  a  non-partisan  analysis,  I  have  reached 
the  conclusion  that,  by  all  major  operational  criteria  excepting  cost, 
the  on-line,  real-time  system  structure  provides  probable  superior  per- 
formance. And  cost  is  seen  as  an  element  which  will  improve  with  incre- 
asing demand  and  maturing  technology.   Others  have  seen  the  same  potential  in 
.     this  structure:  Malcolm  [16],  some  years  ago  and  Sprague,  who  has  pre- 
dicted that  "nearly  all  business  systems  will  be  of  the  on-line,  real-time 
variety  by  1970."  [24,  p. 3]. 

The  global  periodic  structure  has  sometimes  been  represented  as  a 
natural  intermediate  step  between  the  "manual"  local  real-time  stage  and 
the  ultimate  on-line,  real-time  structure  [9].   This  seems  appealing 
because  it  represents  a  gradual  shift  from  local  autonomy  to  automatic 
central  control. 

I  believe  that  the  issue  is  not  particularly  clear.   Implementing 
a  global  periodic  system  is  in  many  ways  a  more  subtle,  dangerous  and  diff- 
icult task  than  implementing  a  semi-automatic  on-line,  real-time  structure. 
The  problems  associated  with  local  reconciliation,  involving  blurred 
responsibility,  are  not  simple.   At  what  point  has  sufficient  decay  set 
in  for  local  override?   This,  coupled  with  possible  dynamic  instability 
problems  and  difficulties  of  comprehension,  constitute  an  argument  for 
a  semi-automatic  on-line,  real-time  intermediate  stage. 
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In  addition  to  the  need  for  improving  hardware  and  software 
capabilities  of  the  new  computers  there  is  a  need  for  understanding 
of,  and  operating  doctrine  for,  the  application  of  these  systems 
to  industrial  control  problems.   We  can,  of  course,  draw  on  the  experience 
of  the  SAGE  system  [16]  for  air  defense  control  and  SABRE,  the  American 
Airlines  system  for  flight  seat  inventory  and  reservation  control  [24], 
but  the  peculiar  economics  of  defense  systems  development  and  the  peculiar 
necessity  for  current,  global  data  for  airlines  has  dictated  solutions 
that  do  not  provide  a  perfect  guide  for  the  manufacturing  firm.  And 
until  more  experience  can  be  gained,  my  sanguine  conclusions  cannot  be 
totally  valid. 

9 

Current  Research  in  On-Line,  Real-Time  Manufacturing  Control 

It  is  partially  to  fill  this  void  that  my  group  at  the  Sloan  School 
and  Project  MAC  is  bending  its  efforts.  We  have  constructed  a  large 
simulation  model  of  a  job  shop  and  are  conducting  experiments  with 
various  systems  and  decision  rules  for  controlling  the  flow  of  goods. 
We  started  at  the  bottom  of  the  decision  hierarchy,  with  routing  and 
sequence  control,  and  have  compared  local  real-time  and  global  real-time 
structures.   As  a  generalization,  we  have  found  significant  value  in  the 
employment  (modest  though  it  has  been)  of  "global"  decision  rules 
supported  by  current,  global  data.  We  are  presently  comparing  the 
effectiveness  of  global  periodic  scheduling  with  on-line,  real-time 
control,  in  this  instance  employing  the  same  heuristic  rules  in  both 
systems  in  order  to  assess  "decay  effects."  We  are  also  experimenting 
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with  closely  coupled  man-machine  "structuring"  decision  making,  which 
involves  our  employing  simulation-aided  decisions  within  a  simulated 
environment. 

An  overview  and  detailed  progress  report  on  these  projects  is 
presented  in  [6] . 

Epilog 

Having  shared  this  exploration  with  you,  I  can  now  offer  my  current 
answer  to  my  student's  original  question.   It  is  no  longer  as  glib  as 
my,  "optimality  isn't  good  enough,"  but  it  may  be  more  informative. 
First,  at  present,  integer  linear  programming  fails  on  the  count  of 
computability  for  problems  of  interesting  size.   Its  optimality  is 
devoutly  to  be  desired,  but  we  can't  use  it.   Second,  in  the  near  term, 
its  computation,  even  if  more  powerful  computers  and  improved  algorithms 
become  available,  is  likely  to  be  extensive  enough  that  the  only  possible 
role  the  model  can  play  is  in  schedule  generation,  within  a  global  periodic 
structure.   And  this  structure  is  subject  to  lack  of  "dymanic  robustness" 
even  if  all  other  specifications  are  met.   While  the  schedule  may  be 
optimal,  the  execution  of  the  schedule  is  unlikely  to  be,  due  to 
problems  of  decay.   But  I  can  say,  in  the  very  long  run,  when  computational 
power  becomes  as  common  and  inexpensive  as  electrical  power  is  today,  it  is 
possible  that  the  optimal  algorithm  can  be  utilized  in  a  real-time  system. 
Each  time  decay  occurs,  the  program  can  be  rerun  to  obtain  valid  real- 
time decisions.   In  other  words,  you  can  have  your  optimality  and  use  it  too. 
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